last executing test programs: 3.199622806s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0x30, 0x62, {0x62, 0x5, "7bc9285822e90127c41b38727cf7d2de364dd2dc000eeb3b6f2b99dde63a1c149ccb8870d4a2adba0ce29dca93290f62845b1621fc42a856b9332679eef091f7570b6c21d0b9873c7400efc0f466ce7a809cf42f34ab6b3cc074da63df64743a"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x40, 0xc, 0xb1, "92d65c460ad0fb11a7ffd1487e1d3be7b7b9faa9b4355a568456d015125cc47cfacbbbfa7355f84d72e4497172efba41cab3effca426a3634eb42bcbac8516f05a795757351e4b74140a535386d753bf1a7de49e57bfd3a4663362ce5e4526c218c5e476010075f9b776c80d566de918c6b2c57e36b2b37abfd90358af038587e59bbf8f082ef3c7f9f51c646be20541c708cf2edb7b3d4fee9d2737208f984f4d992ebed06c0465965dc4d737ebf289c5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000340)={0x20, 0x0, 0x6, {0x4, "c57cc478"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x10}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0xf8}}) r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x7, 0x4]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x902, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x10, 0x0, 0xce}, {0x10, 0x0, 0x8}]}) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000004e40)={0xfb, 0x6, 0x0, 0xc, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 3.026425574s ago: executing program 2 (id=3): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000b00)='net/rpc\x00') r4 = openat(r3, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)='n\\ 127.0.0.102\\00000t\n', 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x6a855000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/scsi_host/host0/state/file0\x00', 0x200, 0xd3) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) write(r8, &(0x7f0000000100)='r', 0x1) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x3000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) landlock_restrict_self(r7, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r6, &(0x7f0000000000)='./file0\x00', 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x208}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x981}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x2]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@local}, 0x1}) 2.403112848s ago: executing program 3 (id=4): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x40086602, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x1ea) lseek(r2, 0x8, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x9, @a_listen={0x10, 0x1, 0xa2494d7c8931cd43, 0x80, 0xa, 0x0, 0x0, "", 0xd, 0xb, 0xd, 0x6, 0x9, "b3dbfffae2f0a9ae34"}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCPNADDRESOURCE(r6, 0x89e0, &(0x7f0000000180)=0x4d) 2.358119096s ago: executing program 0 (id=1): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r1) r4 = fcntl$dupfd(r0, 0x406, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/266, 0x0, 0x3ff8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x40, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x157e, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa8, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x1, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x3, 0x67b3, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x3, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x2, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000000010101000000000000000002000002100001800c0002800500010000000000"], 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) syz_socket_connect_nvme_tcp() 1.625355408s ago: executing program 0 (id=5): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)="7573623000000000000000060000000003") 1.55337489s ago: executing program 2 (id=6): syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e020000070581"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x80, 0xd, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x9, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4c}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x4, 0x7, 0x7, 0x40, 0x5}, 0xa4, &(0x7f0000000300)={0x5, 0xf, 0xa4, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x6, 0xf, 0xb, [0x7fbf00, 0x0, 0xd7, 0x80bfff, 0x3fc0, 0xff003f]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "2a517ef5e9fd68669cdb6d152293f7dd"}, @ptm_cap={0x3}, @generic={0x61, 0x10, 0x3, "8ef1f703c0309a14c03bba6161ba53283339351677af3ea1090b41eee3c173b044b83db0a2b8034eed6baa4ddec0c39b50f7d6448b1f32a6146b452cf374607f7b91d068bd3d3544cf56322e801579374c2d2f20d12712f8681f503d25eb"}, @ptm_cap={0x3}]}, 0x5, [{0xc, &(0x7f00000003c0)=@string={0xc, 0x3, "d4e72c8a8c7c4e1d36dd"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0x28, &(0x7f0000000440)=@string={0x28, 0x3, "2775db7899a0ec96a15db62bae389ca6bfd39a660a12ec3ac7e102354732cc1abbf68a922df0"}}, {0xa7, &(0x7f0000000480)=@string={0xa7, 0x3, "11bef9e20f10694cc46c992d3b69af543f43d1554649b810a62fcf7f7b1302d37800b8d582342842ddb7a3e1a04755aec0bbf899a56442f6278e11d04a9606255a8987fbbdd7609a68200cb959335ec25dcacc21c05334d8bf06de6c995ade6ea849722bb4c5f4710e68db42f625e9d2f8ec302563a33dce79104f63bddb4ab8e9031117d2989e826de10b8e3a80a2074668ed9d98a943a67f053fd97a3657f8fe7fd0d2cf"}}, {0x7d, &(0x7f0000000540)=@string={0x7d, 0x3, "b4a41cc05048211c3add0db73d98aaccd90659140d52004fc8b199f38fb612aac924c31cb59ecb9ad76d3b0803bd2c5cfb204fa56932c598ed3e22f2102ac4763676773a1d105a3964e34457df0294dc1d05cf79bf7d48e22532b0793a6e4c95b4e1b5d845ebe9244174adade669ae7ef89cf38969ed83e4d3edb4"}}]}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000000c0)=0x93f) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(r1, 0x8, &(0x7f00000002c0)={0x0, 0xff}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x1000}) move_pages(0x0, 0x3f, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) 543.07023ms ago: executing program 2 (id=7): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000140)={0x0, 0x30, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x40, 0xb, 0xef, {0xef, 0xe, "ce32538be6bf42acec04aa4f505af8b95b56da1aa657b8f71caa3981b4e24ba34ca978c5c742706b8650a90069cb33f239df0a3a9d62ba5fbfa7ea3193e2e19dafef55defd4d1154cd6999c1f42cdb827d41cb11f54eea39a2b4c6b69c0f59b21a66c4f16def45de44dc4d8d172a24be236159de32bf41f03220aef1563fdcf29ea1f9451f527552ae450c8d09d24601d7d1ccb2b8030232e1ec76c47c0e745f2766270ebedadd7577be2b498358724a3bc09e67fbf8cfbf80adba0cef3e80347fd39d2f5d88a6ce6f2f470fea6d9e8a64e1f3d413cf9c0549356e6535376389d11e176a48d5856ded4248fe25"}}, &(0x7f0000000200)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}, &(0x7f0000000340)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "638988f2206f2829cd6c57ecc7d54531"}, @ext_cap={0x7, 0x10, 0x2, 0x31, 0x7, 0x0, 0xff1b}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x8, 0x5, 0x8}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x3, 0x46, "4b0038bc", "ec55e2f8"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4, 0x4, 0xc0, 0x7, 0x7, 0x2}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x0, 0x18, 0x7c, "b339ce7cb38e703156c5131367c749e1c4e9ee1ca465c98396f13a7759baaf4ec7cfc8b37cd6a6d9656e9aa22047831302e32825c5a40b7dbd08c6e998d2af138fc429022d2d04842504953954170dd11f383a012bb44aad44eaa9ac5e06df0ecb94316d585a170b735055bbd5d3c4b3bfd624229d2bd89982e1356f"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xf4}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x40, 0x40, [0x78]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x891d}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x90}, &(0x7f0000000680)={0x40, 0xb, 0x2, "f658"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x19, 0x2, "d980"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xa3}, &(0x7f0000000880)={0x40, 0x21, 0x1}}) 0s ago: executing program 1 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffffff600000, &(0x7f0000afaf0a)=""/246) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x103a42, 0x32) copy_file_range(r1, 0x0, r1, 0x0, 0x9, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x2, 0x2, 0x3d, 0x0, 0x3, 0x0, 0xb, 0x7, 0x7, 0x44, 0x1, 0x18, 0x4, 0x3, 0x8}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)={0x2, 0x0, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x2, 0x5, 0x20, 0x3, 0x3, 0x106c, 0x10000000000001, 0x4, 0x80000004000088, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, 0x2], 0x8080000, 0x343a90}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r4, 0x40044591, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x2000}], 0x1, 0x0, 0x0, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x80) sendmsg$NFT_BATCH(r5, &(0x7f0000000a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x4e8}, 0x1, 0x0, 0x0, 0x22001000}, 0x20000000) r6 = open(&(0x7f0000000100)='./file0\x00', 0x142840, 0xe0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) read(0xffffffffffffffff, &(0x7f0000000100)=""/100, 0x64) getdents(r6, &(0x7f0000000580)=""/80, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 75.339505][ T5600] cgroup: Unknown subsys name 'net' [ 75.428876][ T5600] cgroup: Unknown subsys name 'cpuset' [ 75.438382][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.102521][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.352140][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.353484][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.355149][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.357339][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.358233][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.358808][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.364262][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.365233][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.365788][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.377299][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.385171][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.386175][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.387065][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.388111][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.389438][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.389810][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.390189][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.396951][ T4929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.398871][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.409121][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.948909][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.949043][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.949184][ T5612] bridge_slave_0: entered allmulticast mode [ 81.952418][ T5612] bridge_slave_0: entered promiscuous mode [ 82.015478][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.015603][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.015938][ T5612] bridge_slave_1: entered allmulticast mode [ 82.018748][ T5612] bridge_slave_1: entered promiscuous mode [ 82.193356][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.256147][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.287740][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.288155][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.288297][ T5611] bridge_slave_0: entered allmulticast mode [ 82.290293][ T5611] bridge_slave_0: entered promiscuous mode [ 82.361300][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.361424][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.361901][ T5611] bridge_slave_1: entered allmulticast mode [ 82.365151][ T5611] bridge_slave_1: entered promiscuous mode [ 82.381291][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.381399][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.381525][ T5610] bridge_slave_0: entered allmulticast mode [ 82.384997][ T5610] bridge_slave_0: entered promiscuous mode [ 82.422291][ T5612] team0: Port device team_slave_0 added [ 82.427769][ T5612] team0: Port device team_slave_1 added [ 82.427997][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.428100][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.428318][ T5610] bridge_slave_1: entered allmulticast mode [ 82.430598][ T5610] bridge_slave_1: entered promiscuous mode [ 82.465607][ T54] Bluetooth: hci2: command tx timeout [ 82.465780][ T54] Bluetooth: hci1: command tx timeout [ 82.465885][ T5614] Bluetooth: hci3: command tx timeout [ 82.466050][ T54] Bluetooth: hci0: command tx timeout [ 82.528923][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.529108][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.529626][ T5609] bridge_slave_0: entered allmulticast mode [ 82.531186][ T5609] bridge_slave_0: entered promiscuous mode [ 82.534922][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.535077][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.535202][ T5609] bridge_slave_1: entered allmulticast mode [ 82.537011][ T5609] bridge_slave_1: entered promiscuous mode [ 82.543020][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.604959][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.607516][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.608511][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.608524][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.608547][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.612356][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.646211][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.663185][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.663203][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.663226][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.667997][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.750652][ T5611] team0: Port device team_slave_0 added [ 82.781573][ T5611] team0: Port device team_slave_1 added [ 82.783342][ T5610] team0: Port device team_slave_0 added [ 82.811466][ T5610] team0: Port device team_slave_1 added [ 82.825559][ T5609] team0: Port device team_slave_0 added [ 82.858240][ T5609] team0: Port device team_slave_1 added [ 82.858929][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.858942][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.858963][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.904066][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.904084][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.904106][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.907723][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.907738][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.907761][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.909124][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.909135][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.909157][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.936660][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.936677][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.936699][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.947793][ T5612] hsr_slave_0: entered promiscuous mode [ 82.949200][ T5612] hsr_slave_1: entered promiscuous mode [ 82.966377][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.966394][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.966417][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.082301][ T5610] hsr_slave_0: entered promiscuous mode [ 83.083377][ T5610] hsr_slave_1: entered promiscuous mode [ 83.084151][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 83.084229][ T5610] Cannot create hsr debugfs directory [ 83.173880][ T5611] hsr_slave_0: entered promiscuous mode [ 83.175962][ T5611] hsr_slave_1: entered promiscuous mode [ 83.176731][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 83.176749][ T5611] Cannot create hsr debugfs directory [ 83.230327][ T5609] hsr_slave_0: entered promiscuous mode [ 83.231479][ T5609] hsr_slave_1: entered promiscuous mode [ 83.232350][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 83.232369][ T5609] Cannot create hsr debugfs directory [ 83.650622][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.667267][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.668428][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.673639][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.677713][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.689240][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.705503][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.717181][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.790636][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.797924][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.801067][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.808418][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.809640][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.826795][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.833892][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.848746][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.946288][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.953214][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.954210][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.979350][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.980186][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.987862][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.989934][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.999071][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.121805][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.123657][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.130069][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.130947][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.136163][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.164171][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.175393][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.176797][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.180540][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.250273][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.263739][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.295390][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.295572][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.302469][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.302564][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.385873][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.418386][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.438460][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.438526][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.439888][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.439946][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.500726][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.530509][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.530630][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.545052][ T54] Bluetooth: hci3: command tx timeout [ 84.549285][ T54] Bluetooth: hci0: command tx timeout [ 84.549318][ T54] Bluetooth: hci1: command tx timeout [ 84.549341][ T54] Bluetooth: hci2: command tx timeout [ 84.582350][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.582478][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.679512][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.797432][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.830613][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.830761][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.862566][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.862683][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.548776][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.692412][ T5612] veth0_vlan: entered promiscuous mode [ 85.743246][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.744694][ T5612] veth1_vlan: entered promiscuous mode [ 85.968123][ T5612] veth0_macvtap: entered promiscuous mode [ 85.993512][ T5610] veth0_vlan: entered promiscuous mode [ 86.008579][ T5612] veth1_macvtap: entered promiscuous mode [ 86.014897][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.046695][ T5610] veth1_vlan: entered promiscuous mode [ 86.054346][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.087286][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.107720][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.148328][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.206513][ T5609] veth0_vlan: entered promiscuous mode [ 86.238469][ T5610] veth0_macvtap: entered promiscuous mode [ 86.262379][ T5611] veth0_vlan: entered promiscuous mode [ 86.273499][ T5610] veth1_macvtap: entered promiscuous mode [ 86.298883][ T5609] veth1_vlan: entered promiscuous mode [ 86.310555][ T155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.310611][ T155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.310649][ T155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.356352][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.362738][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.363790][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.363811][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.407693][ T5611] veth1_vlan: entered promiscuous mode [ 86.479089][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.479111][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.498181][ T5609] veth0_macvtap: entered promiscuous mode [ 86.526328][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.545211][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.548043][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.548298][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.558757][ T5609] veth1_macvtap: entered promiscuous mode [ 86.597742][ T5611] veth0_macvtap: entered promiscuous mode [ 86.620861][ T5611] veth1_macvtap: entered promiscuous mode [ 86.624604][ T5617] Bluetooth: hci0: command tx timeout [ 86.625110][ T5617] Bluetooth: hci2: command tx timeout [ 86.625140][ T5617] Bluetooth: hci1: command tx timeout [ 86.625163][ T5617] Bluetooth: hci3: command tx timeout [ 86.682920][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.692053][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.692075][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.718720][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.720215][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.743563][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.797307][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.797331][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.812483][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.835078][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.835130][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.835168][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.835205][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.937133][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.937187][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.937224][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.038706][ T1229] cfg80211: failed to load regulatory.db [ 87.134765][ T5711] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 87.145006][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.145030][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.230145][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.230169][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.306391][ T5711] usb 2-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 87.313518][ T5711] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.313552][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.313579][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 87.314749][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.323438][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.323457][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.387150][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.387171][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.409926][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.409958][ T5711] usb 2-1: Product: syz [ 87.409974][ T5711] usb 2-1: Manufacturer: syz [ 87.409989][ T5711] usb 2-1: SerialNumber: syz [ 87.441672][ T5711] usb 2-1: config 0 descriptor?? [ 87.448599][ T5763] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.566666][ T5711] rc_core: IR keymap rc-streamzap not found [ 87.566689][ T5711] Registered IR keymap rc-empty [ 87.589197][ T5711] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 87.594653][ T5711] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 87.845122][ T5777] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.694686][ T5761] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.714542][ T27] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 88.714608][ T5616] Bluetooth: hci3: command tx timeout [ 88.714641][ T5616] Bluetooth: hci1: command tx timeout [ 88.714664][ T5616] Bluetooth: hci2: command tx timeout [ 88.714687][ T5616] Bluetooth: hci0: command tx timeout [ 88.867299][ T5761] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 88.870005][ T27] usb 3-1: not running at top speed; connect to a high speed hub [ 88.870044][ T27] usb 3-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 88.870159][ T5761] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 88.873025][ T27] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.873073][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.873864][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.873888][ T5761] usb 1-1: SerialNumber: syz [ 88.933876][ T27] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 89.129957][ T5789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.130565][ T5789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.157895][ T5789] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 89.491362][ T5797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.493833][ T5797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.541286][ T27] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 89.558460][ T27] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 89.558529][ T27] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 89.567341][ T27] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 89.614734][ T27] usb 3-1: USB disconnect, device number 2 [ 89.678354][ T5761] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 89.821684][ T27] usb 1-1: USB disconnect, device number 2 [ 89.834578][ T27] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 89.968032][ T5761] usb 2-1: USB disconnect, device number 2 [ 90.048462][ T5800] [ 90.050866][ T5800] ====================================================== [ 90.057908][ T5800] WARNING: possible circular locking dependency detected [ 90.065021][ T5800] syzkaller #0 Not tainted [ 90.069439][ T5800] ------------------------------------------------------ [ 90.076463][ T5800] syz.1.8/5800 is trying to acquire lock: [ 90.082196][ T5800] ffff88807f2a88a0 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 90.091708][ T5800] [ 90.091708][ T5800] but task is already holding lock: [ 90.099182][ T5800] ffff88805ce3f960 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 90.108962][ T5800] [ 90.108962][ T5800] which lock already depends on the new lock. [ 90.108962][ T5800] [ 90.119372][ T5800] [ 90.119372][ T5800] the existing dependency chain (in reverse order) is: [ 90.128391][ T5800] [ 90.128391][ T5800] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 90.136217][ T5800] __d_alloc_parallel+0xc32/0x1700 [ 90.141854][ T5800] __lookup_slow+0x82/0x2f0 [ 90.146886][ T5800] lookup_slow+0x59/0x80 [ 90.151683][ T5800] link_path_walk+0xd22/0x1910 [ 90.156974][ T5800] path_openat+0x1c4/0x1da0 [ 90.162005][ T5800] do_file_open+0x23e/0x4a0 [ 90.167032][ T5800] do_sys_openat2+0x115/0x200 [ 90.172229][ T5800] __x64_sys_openat+0x138/0x170 [ 90.177860][ T5800] do_syscall_64+0x166/0x520 [ 90.183156][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.189571][ T5800] [ 90.189571][ T5800] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 90.198626][ T5800] __lock_acquire+0x164c/0x2de0 [ 90.204023][ T5800] lock_acquire+0x115/0x350 [ 90.209311][ T5800] down_read+0x45/0x320 [ 90.214749][ T5800] lookup_slow+0x46/0x80 [ 90.219527][ T5800] ovl_lookup_single+0x323/0xe90 [ 90.224990][ T5800] ovl_lookup_layer+0x377/0x440 [ 90.230370][ T5800] ovl_lookup+0x5e5/0x1c80 [ 90.235307][ T5800] lookup_open+0x94b/0x1970 [ 90.240333][ T5800] path_openat+0x673/0x1da0 [ 90.245536][ T5800] do_file_open+0x23e/0x4a0 [ 90.250567][ T5800] do_sys_openat2+0x115/0x200 [ 90.255776][ T5800] __x64_sys_openat+0x138/0x170 [ 90.261163][ T5800] do_syscall_64+0x166/0x520 [ 90.266284][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.272725][ T5800] [ 90.272725][ T5800] other info that might help us debug this: [ 90.272725][ T5800] [ 90.282956][ T5800] Possible unsafe locking scenario: [ 90.282956][ T5800] [ 90.290414][ T5800] CPU0 CPU1 [ 90.295782][ T5800] ---- ---- [ 90.301153][ T5800] lock(DCACHE_PAR_LOOKUP); [ 90.305756][ T5800] lock(&type->i_mutex_dir_key#5); [ 90.313488][ T5800] lock(DCACHE_PAR_LOOKUP); [ 90.320601][ T5800] rlock(&type->i_mutex_dir_key#5); [ 90.325898][ T5800] [ 90.325898][ T5800] *** DEADLOCK *** [ 90.325898][ T5800] [ 90.334139][ T5800] locks held by syz.1.8/5800: 3, last CPU#1: [ 90.340119][ T5800] #0: ffff888032c9e460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 90.349357][ T5800] #1: ffff88805ceea230 (&ovl_i_mutex_dir_key[depth]){+.+.}-{4:4}, at: lookup_open+0x246/0x1970 [ 90.359813][ T5800] #2: ffff88805ce3f960 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 90.370023][ T5800] [ 90.370023][ T5800] stack backtrace: [ 90.375924][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 90.384953][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.395102][ T5800] Call Trace: [ 90.398650][ T5800] [ 90.401590][ T5800] dump_stack_lvl+0xe8/0x150 [ 90.406200][ T5800] print_circular_bug+0x2e2/0x300 [ 90.411261][ T5800] check_noncircular+0x12f/0x150 [ 90.416227][ T5800] __lock_acquire+0x164c/0x2de0 [ 90.421126][ T5800] ? lock_acquire+0x115/0x350 [ 90.425816][ T5800] lock_acquire+0x115/0x350 [ 90.430328][ T5800] ? lookup_slow+0x46/0x80 [ 90.434779][ T5800] down_read+0x45/0x320 [ 90.438945][ T5800] ? lookup_slow+0x46/0x80 [ 90.443373][ T5800] ? d_lookup+0x8a/0xa0 [ 90.447535][ T5800] lookup_slow+0x46/0x80 [ 90.451780][ T5800] ovl_lookup_single+0x323/0xe90 [ 90.456726][ T5800] ? __pfx_ovl_lookup_single+0x10/0x10 [ 90.462191][ T5800] ? tomoyo_path_number_perm+0x219/0x5f0 [ 90.467836][ T5800] ? tomoyo_path_number_perm+0x219/0x5f0 [ 90.473478][ T5800] ovl_lookup_layer+0x377/0x440 [ 90.478346][ T5800] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.484425][ T5800] ovl_lookup+0x5e5/0x1c80 [ 90.488850][ T5800] ? __pfx_from_kgid+0x10/0x10 [ 90.493616][ T5800] ? apparmor_capable+0x126/0x170 [ 90.498643][ T5800] ? bpf_lsm_capable+0x9/0x20 [ 90.503333][ T5800] ? security_capable+0x7e/0x2c0 [ 90.508289][ T5800] ? capable_wrt_inode_uidgid+0x1c2/0x270 [ 90.514030][ T5800] ? __pfx_ovl_lookup+0x10/0x10 [ 90.518889][ T5800] ? ovl_permission+0x187/0x300 [ 90.523747][ T5800] ? __pfx_ovl_permission+0x10/0x10 [ 90.528952][ T5800] ? from_kgid+0x1c6/0x660 [ 90.533379][ T5800] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 90.538849][ T5800] ? __pfx_from_kgid+0x10/0x10 [ 90.543620][ T5800] ? inode_permission+0x2b8/0x600 [ 90.548649][ T5800] ? bpf_lsm_inode_create+0x9/0x20 [ 90.553764][ T5800] ? security_inode_create+0xc3/0x340 [ 90.559145][ T5800] lookup_open+0x94b/0x1970 [ 90.563666][ T5800] path_openat+0x673/0x1da0 [ 90.568181][ T5800] do_file_open+0x23e/0x4a0 [ 90.572704][ T5800] ? __pfx_do_file_open+0x10/0x10 [ 90.577737][ T5800] ? _raw_spin_unlock+0x28/0x50 [ 90.582590][ T5800] ? alloc_fd+0x6af/0x760 [ 90.586942][ T5800] do_sys_openat2+0x115/0x200 [ 90.591725][ T5800] ? __se_sys_futex+0x3a8/0x450 [ 90.596588][ T5800] ? __pfx_do_sys_openat2+0x10/0x10 [ 90.601789][ T5800] ? rcu_is_watching+0x16/0xb0 [ 90.606560][ T5800] __x64_sys_openat+0x138/0x170 [ 90.611425][ T5800] do_syscall_64+0x166/0x520 [ 90.616116][ T5800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.622193][ T5800] ? clear_bhb_loop+0x70/0xc0 [ 90.626879][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.632781][ T5800] RIP: 0033:0x7fa535b9e159 [ 90.637202][ T5800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.656812][ T5800] RSP: 002b:00007fa533df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.665246][ T5800] RAX: ffffffffffffffda RBX: 00007fa535e25fa0 RCX: 00007fa535b9e159 [ 90.673232][ T5800] RDX: 0000000000103a42 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 90.681211][ T5800] RBP: 00007fa535c3506b R08: 0000000000000000 R09: 0000000000000000 [ 90.689188][ T5800] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 90.697163][ T5800] R13: 00007fa535e26038 R14: 00007fa535e25fa0 R15: 00007fff194f98e8 [ 90.705150][ T5800] [ 90.719772][ T5772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512